Conversation
|
Out of interest, why do we do the delete of the binaries directory content in the component governance task? Not clear how those are related. It was originally added in this PR: #17192 Refers to: tools/ci_build/github/azure-pipelines/nuget/templates/dml-vs-2022.yml:302 in 6355bae. [](commit_id = 6355bae, deletion_comment = False) |
|
It is because the build folder has a lot of 3rd-party dependencies that can raise unwanted alerts. For example, composable_kernel contains a requirements.txt file in their "docs/sphinx" folder. The requirements.txt file is for listing the dependencies that are needed for building the docs of composable_kernel. We do not do that and we do not install the packages from that requirements.txt . Therefor we need to delete the folder to avoid the package being reported to CG. |
Description
Fix a build error in "Zip-Nuget-Java-Nodejs Packaging Pipeline" which deletes files too early.
Motivation and Context